Samsung Mobile Fingerprint Trustlet Out-of-Bounds Read Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the fingerprint trustlet on Samsung Mobile devices. This issue is present in versions of Android 13, 14, and 15, prior to the June 2025 Security Maintenance Release. The vulnerability allows local privileged attackers to read memory outside of the intended bounds, potentially leading to unauthorized information access or memory corruption.

Impact

Exploitation of this vulnerability could allow local privileged attackers to read out-of-bounds memory, which may lead to information disclosure or memory corruption.

Remediation

Users can apply the June 2025 Security Maintenance Release to address this vulnerability.